Paradigmatic and Exploration of Blind Worm
Journal Title: INTERNATIONAL JOURNAL OF ENGINEERING TRENDS AND TECHNOLOGY - Year 2012, Vol 3, Issue 3
Abstract
Active worms pose major security threats to the Internet. This is due to the ability of active worms to propagate in an automated fashion as they continuously compromise computers on the Internet. Active worms evolve during their propagation and thus pose great challenges to defend against them. In this paper, we investigate a new class of active worms, referred to as Tarnen Worm (C-Worm in short). The C-Worm is different from traditional worms because of its ability to intelligently manipulate its scan traffic volume over time. Thereby, the C-Worm camouflages its propagation from existing worm exploration systems based on analyzing the propagation traffic generated by worms. We analyze characteristics of the C-Worm and conduct a comprehensive comparison between its traffic and non-worm traffic (background traffic). We observe that these two types of traffic are barely distinguishable in the time domain. However, their distinction is clear in the frequency domain, due to the recurring manipulative nature of the C-Worm. Motivated by our observations, we design a novel spectrum-based scheme to detect the C-Worm. Our scheme uses the Power Spectral Density (PSD) distribution of the scan traffic volume and its corresponding Spectral Flatness Measure (SFM) to distinguish the C-Worm traffic from background traffic. Using a comprehensive set of exploration metric s and real-world traces as background traffic, we conduct extensive performance evaluations on our proposed spectrum-based exploration scheme. The performance data clearly demonstrates that our scheme can effectively detect the C-Worm propagation. Furthermore, we show the generality of our spectrum-based scheme in effectively detecting not only the C-Worm, but traditional worms as well.
Authors and Affiliations
Yellamandaiah Gogula1, E. Jhansi Rani
Keywords
Related Articles
- EP ID EP151302
- DOI -
- Views 98
- Downloads 0
A Review on Redesign of Drive System for Textile Powerloom Machine to Prevent Downtime and Improve Reliability of System
The textile industry is one of the most complicated manufacturing industries because it is a fragmented and heterogeneous sector dominated by small and medium enterprises. A loom is a tool used for weaving yarn into text...
Biogas Generation Plant Based On Kitchen Waste Material
Millions of cubic meters of methane in the form of biogas are produced every year by the decomposition of organic matter, both animal and vegetable. It is almost identical to the natural gas pumped out of the ground by t...
A Multimodal Biometric Recognition System based on Fusion of Palmprint and Fingerprint
Basic aim of a biometric system is automatically discriminate between subjects as well as protect data. It also protects resources access from unauthorized users. We develop a biometric identification system that r...
Feature Extraction Using Empirical Mode Decomposition of Speech Signal
Speech signal carries information related to not only the message to be conveyed, but also about speaker, language, emotional status of speaker, environment and so on. Speech is produced by exciting the time varyin...
Controlling various network based ADoS Attacks in cloud computing environment: By Using Port Hopping Technique
Cloud computing security is sub-domain of computer security, network security, and information security. It refers to a broad set of security policies, technologies, and flow controls deployed to protect data, appl...